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ALEXANDER 


Our  current  and  potential 

adversaries  clearly  understand 
the  military  potential  of 
cyberspace  and  the  expansive 
power  of  the  medium.  Terrorists  employ  the 
Internet  for  recruiting,  training,  motivating, 
and  synchronizing  their  followers.  They  can 
operate  essentially  unrestrained  and  are  free 
to  innovate,  unbound  by  law,  policy,  or  prec¬ 
edent.  Nations  such  as  China  and  Russia  are 
developing  their  own  “cyberspace  warriors.” 
China,  for  instance,  has  formed  cyberspace 
battalions  and  regiments,  the  primary 
purpose  of  which  is  to  identify  and  exploit 
weaknesses  in  our  military,  government,  and 
commercial  networks.^  In  November  1999,  the 
PLA  Daily  stated,  “Internet  warfare  is  of  equal 
significance  to  land,  sea,  and  air  power  and 
requires  its  own  military  branch,”  and  that  “it 
is  essential  to  have  an  all- conquering  offen¬ 
sive  technology  and  to  develop  software  and 
technology  for  net  offensives . . .  able  to  launch 
attacks  and  countermeasures.” 

The  threat  from  these 
forces  is  credible  and  real. 

While  the  time-tested  princi¬ 
ples  of  war  will  ultimately  apply 
in  cyberspace,  its  characteris¬ 
tics  are  so  radically  different 
that  they  demand  significant 
innovation  and  changes  to  the 
way  we  organize  and  conduct 
military  operations  and  tactics 
in  this  domain. 

Many  within  the  U.S. 

Government  and  private  sector 
are  beginning  to  recognize  the 
importance  of  cyberspace  (and 
operations  within  it)  to  national 
security.  The  March  2005 
National  Defense  Strategy  iden¬ 
tified  cyberspace  as  a  new  theater  of  opera¬ 
tions  and  assessed  cyberspace  operations  as  a 
potentially  disruptive  challenge,  concluding 
that  in  “rare  instances,  revolutionary  tech¬ 
nology  and  associated  military  innovation 
can  fundamentally  alter  long- established 
concepts  of  warfare.”^  The  Chairman  of  the 
Joint  Chiefs  of  Staff  concluded  in  the  2004 
National  Military  Strategy: 

The  Armed  Forces  must  have  the  ability 
to  operate  across  the  air,  land,  sea,  space 
and  cyberspace  domains  of  the  battlespace. 
Armed  Forces  must  employ  military  capa¬ 
bilities  to  ensure  access  to  these  domains 
to  protect  the  nation,  forces  in  the  field 


and  U.S.  global  interests. . . .  Along  with 
technological  solutions  to  improve  joint  war 
fighting,  we  must  also  examine  our  doctrine, 
organization,  training,  materiel,  leadership 
and  education,  personnel  and  facilities  to 
ensure  military  superiority.^ 

Despite  this  emphasis,  however,  we  can 
argue  that,  while  we  have  ample  national 
level  strategies,  we  have  yet  to  translate 
these  strategies  into  operational  art  through 
development  of  joint  doctrine  for  cyberspace. 
Through  the  doctrine  vetting  process,  we  can 
develop  a  common  understanding  of  what  it 
means  to  conduct  warfare  within  and  through 
cyberspace.  The  ultimate  strategic  objective 
of  these  operations  is  to  ensure  U.S.  freedom 
of  action  in  cyberspace  and  to  deny  the  enemy 
the  same. 

Development  of  cyberspace  doctrine 
is  a  complex  task;  the  only  doctrine  that 
currently  addresses  operations  within  the 
cyberspace  environment  is 
contained  within  two  subsets 
of  information  operations  (lO): 
computer  network  operations 
and  electronic  warfare  (EW). 
Since  computer  network  opera¬ 
tions  and  EW  are  exclusively 
conducted  through  “the  use 
of  electronics  and  the  electro¬ 
magnetic  spectrum,”  there  is  an 
overlap  between  lO  activities 
and  what  our  national  strategy 
defines  as  military  capabilities 
in  the  cyberspace  domain  (that 
is,  cyber  warfare).  Although  the 
defensive  elements  of  lO  and 
cyber  warfare  are  important,  to 
narrow  the  scope  of  our  thesis, 
the  remainder  of  the  argu¬ 
ment  will  principally  focus  on  the  offensive 
elements. 

Joint  Publication  (JP)  3-13,  Informa¬ 
tion  Operations,  defines  10  as  “the  integrated 
employment  of  electronic  warfare,  computer 
network  operations,  psychological  operations, 
military  deception,  and  operations  security,  in 
concert  with  specified  supporting  and  related 
capabilities,  to  influence,  disrupt,  corrupt, 
or  usurp  adversarial  human  and  automated 
decisionmaking  while  protecting  our  own.”^ 

JP  3-13  also  states  “for  the  purpose  of  military 
operations,  computer  network  operations  are 
divided  into  computer  network  attack,  com¬ 
puter  network  defense,  and  related  computer 
network  exploitation  enabling  operations.” 
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Cyberspace  as  a  Warfighting  Domain 

The  common  theme  that  runs  through 
lO  doctrine  is  its  focus  on  affecting  the 
human  or  automated  cognitive  or  intellectual 
processing  of  information.  JP  3-13  states, 

“The  focus  of  lO  is  on  the  decisionmaker 
and  the  information  environment  in  order 
to  affect  decisionmaking  and  thinking 
processes,  knowledge,  and  understanding  of 
the  situation.”  Since  the  “ultimate  strategic 
objective”  of  lO  is  “to  deter  a  potential  or 
actual  adversary . . .  from  taking  actions  that 
threaten  U.S.  national  interests,”  then  to  be 
successful,  lO  must  encompass  all  actions 
taken  by  the  U.S.  Government.  Even  though 
the  recent  revision  of  JP  3-13  narrows  lO 
doctrine  to  “five  core  capabilities,”  it  still 
seeks  to  employ  other  “supporting  and  related 
capabilities”  that  in  effect  encompass  nearly 
all  Government  actions.^  Under  lO  doctrine, 
any  statement  we  make,  any  movement  of 
U.S.  forces,  or  any  bomb  we  drop  could  be 
considered  a  form  of  fires  in  an  information 
operation  if  its  principal  intent  is  to  influence 
adversary  decisions  away  from  taking  action 
against  our  will. 

Now,  let  us  contrast  lO  doctrine  with 
what  we  propose  for  cyber  warfare.  The  focus 
of  cyber  warfare  is  on  using  cyberspace  (by 
operating  within  or  through  it)  to  attack 
personnel,  facilities,  or  equipment  with 
the  intent  of  degrading,  neutralizing,  or 
destroying  enemy  combat  capability,  while 
protecting  our  own.  Instruments  unique 
to  cyber  warfare  are  narrowly  confined  to 
those  activities  described  in  the  definition: 
EW  and  computer  network  operations. 

When  we  conduct  any  military  operation, 
we  must  integrate  and  synchronize  all  avail¬ 
able  instruments  of  warfare  in  all  domains. 

It  is  clearly  understood  that  land,  maritime, 
air,  and  space  warfare  are,  in  and  of  them¬ 
selves,  important  warfighting  activities  that 
ensure  the  U.S.  military’s  ability  to  maintain 
freedom  of  action  while  denying  an  adversary 
the  same.  Although  it  is  understood  that 
land,  maritime,  air,  and  space  warfare  will  be 
employed  to  deter  (for  example,  influence)  an 
adversary,  no  one  believes  that  warfare  within 
these  domains  is  uniquely  “information  oper¬ 
ations.”  Where  the  principal  effect  of  lO  is  to 
influence  an  adversary  not  to  take  an  action, 
the  principal  effect  of  cyber  warfare  is  to  deny 
the  enemy  freedom  of  action  in  cyberspace. 
Granted,  by  denying  enemies’  freedom  of 
action  in  cyberspace,  we  will  also  influence 
them;  however,  influence  is  not  the  intended 


U.S.  Air  Force  (Jack  Braden) 

primary  effect— denying  freedom  of  action  is 
the  intended  primary  effect. 

It  may  seem  that  we  are  arguing  to 
remove  EW  and  computer  network  operations 
from  lO  doctrine.  We  are  not.  What  we  are 
arguing  for  is  that  just  as  we  have  now  come 
to  recognize  cyberspace  as  a  new  warfighting 
domain,  so  too  must  we  recognize  that  it  is 
equal  to  the  other  warfighting  domains  and 
doctrine  should  reflect  such.  Now  is  the  time 
to  update  our  doctrine  to  establish  funda¬ 
mental  cyber  warfare  principles  that  guide 
employment  of  EW  and  computer  network 
operations  forces  in  support  of  our  national 
objectives. 

Operationalizing  Cyberspace  Warfare 

U.S.  Strategic  Command  (USSTRAT- 
COM)  has  already  begun  to  implement  this 


shift.  The  commander,  beginning  in  Unified 
Command  Plan  (UCP)  2002  and  carried 
forth  in  subsequent  UCPs,  was  given  the 
responsibility  for  “integrating  and  coordinat- 


the  principal  effect  of  cyber 
warfare  is  to  deny  the  enemy 
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ing  [Department  of  Defense]  lO  that  cross 
geographic  areas  of  responsibility  or  across 
the  core  lO  capabilities,  including  identify¬ 
ing  desired  characteristics  and  capabilities 
for  computer  network  attack  and  conduct¬ 
ing  computer  network  attack  in  support  of 
other  combatant  commanders,  as  directed.”^ 
USSTRATCOM  is  moving  to  shift  operational 
focus  from  the  cognitive  effects,  described 
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within  lO,  to  a  common  planning  framework 
for  the  Defense  Department  to  achieve  specific 
cyberspace  objectives.  We  have  redefined  our 
cyberspace  mission  area  in  terms  of  offensive- 
network  warfare  (NW)  and  defensive-network 
operations  (NetOps)— and  established 
JFCC-NW  and  JTF-GNO  to  address  each  of 
those  mission  sets,  respectively 

As  directed  by  the  USSTRATCOM 
commander,  the  Joint  Functional  Com¬ 
ponent  Command  for  Network  Warfare 
(JFCC-NW)  was  established  to  “optimize 
planning,  execution,  and  force  management 
for  the  assigned  missions  of  deterring  attacks 
against  the  United  States,  its  territories, 
possessions,  and  bases,  and  employing 
appropriate  forces  should  deterrence  fail,  and 
the  associated  mission  of  integrating  and 
coordinating  [Defense  Department]  CNA 
[computer  network  attack]  and  computer 
network  defense  as  directed  by  headquarters 
USSTRATCOM.”^  The  command  further 
defines  network  warfare  as  “the  employment 
of  computer  network  operations  with  the 
intent  of  denying  adversaries  the  effective 
use  of  their  own  computers,  information 
systems,  and  networks.”^  This  mission  state¬ 
ment  recognizes  the  primacy  of  the  strike  or 
attack  aspects  of  computer  network  attacks 
as  a  military  fire,  not  merely  as  an  enabler  for 
cognitive  effects. 

USSTRATCOM  has  also  begun  to 
develop  tactics,  techniques,  and  procedures 
and  other  concepts  designed  to  integrate 
cyberspace  capabilities  into  cross-mission 
strike  plans.  We  are  developing  concepts  to 
address  warfighting  in  cyberspace  in  order 
to  assure  freedom  of  action  in  cyberspace  for 
the  United  States  and  our  allies  while  denying 
adversaries  and  providing  cyberspace- 
enabled  effects  to  support  operations  in  other 
domains.^  These  concepts,  and  the  cyberspace 
effects  that  they  focus  on,  are  clearly  based  on 
the  military  concepts  of  strike,  fires  (support¬ 
ing  and  suppressing),  and  defense. 

While  the  concepts  of  NW  and  NetOps 
are  a  good  start,  they  represent  only  a  small 
subset  of  the  elements  of  military  power 
available  within  or  enabled  by  cyberspace.  In 
order  to  fully  engage  in  the  development  of 
joint  doctrine  within  the  cyberspace  domain, 
it  is  also  necessary  to  develop  a  definition  of 
exactly  what  warfare  within  cyberspace— or 
cyberspace  warfare— is. 

JP-1  describes  a  joint  doctrine  devel¬ 
opment  process  that  starts  with  a  project 
proposal  and  then  moves  through  a  program 


directive,  developing  and  staffing  drafts 
prior  to  receiving  approval  from  the  Chair¬ 
man  of  the  Joint  Chiefs  of  Staff.  We  need  to 
engage  this  process  to  codify  the  planning, 
operational,  and  support  systems  required  to 


execute  this  rapidly  emerging  form  of  warfare 
that  focuses  on  how  we  will  plan  and  execute 
operations  within  the  arena.  Our  challenge  is 
establishing  recognizable  doctrine  that  will 
include  definitions  and  fundamental  prin¬ 
ciples  to  guide  the  employment  of  military 
forces  and  weapon  systems  for  operations 
within  the  cyberspace  domain. 

In  coming  to  grips  with  military  opera¬ 
tions  in  cyberspace,  we  face  many  challenges 
that  are  strikingly  similar  to  what  our  military 
faced  during  the  Inter  war  Years  from  1919  to 
1938.  During  this  period,  the  military  strug¬ 
gled  with  mechanization  and  the  revolution 
in  military  affairs  that  it  fostered.  Airpower  in 
particular  came  into  its  own,  but  not  without 
great  frustration  and  sacrifice  on  the  part  of 
visionary  airpower  advocates.  Despite  signifi¬ 
cant  advances  in  air  combat  during  World 
War  I,  the  Army,  which  controlled  most  U.S. 
airpower,  was  hesitant  to  move  forward.  Only 
after  nearly  20  years  of  struggle  and  the  high- 
profile  court  martial  of  Billy  Mitchell  were 
airpower  advocates  able  to  make  the  advances 
in  operations,  tactics,  and  materiel  in  the 
air  domain  that  proved  crucial  to  the  Allied 
victory  in  World  War  II. 

The  speed  at  which  the  cyberspace 
domain  is  evolving  and  its  ever-growing 
impact  on  national  security  make  this 
potentially  as  critical  a  period  as  that  faced 
by  Mitchell,  Claire  Chennault,  and  their 
contemporaries  as  they  realized  the  potential 
of  the  air  domain  and  sought  to  develop 
airpower  doctrine.  Unfortunately,  we  do 
not  have  the  luxury  of  20  years  to  develop 
strategy,  tactics,  and  doctrine  to  deal  with 
this  revolution  and  maintain  U.S.  superiority 
in  this  rapidly  changing  environment.  The 
trends  for  advances  in  technology,  often  (cor¬ 
rectly  or  incorrectly)  related  to  Moore  s  Law 
and  derivative  theories,  such  as  the  Law  of 
Accelerating  Returns  proposed  by  Ray  Kurz- 
weil  in  his  2001  essay,  dictate  that  we  must 


move  quickly.^®  If  one  examines  the  advances 
in  Internet  and  computer  technology  in  just 
the  last  5  years,  it  is  readily  apparent  that  we 
could  find  ourselves  behind  or  even  militarily 
irrelevant  in  cyberspace. 


It  is  imperative  that  we  capture  the 
lessons  learned  associated  with  previous  revo¬ 
lutions  in  military  affairs  and  move  quickly 
and  decisively.  We  must  make  a  dedicated 
joint  effort  to  develop  the  forces  that  will  fight 
and  defend  our  national  interests  in  cyber¬ 
space,  and  we  must  diligently  develop  the 
training  and  doctrine  that  will  guide  them  as 
they  execute  their  critical  missions  in  this  new 
military  domain.  JFQ 
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